Privacy policy

1. Data controller

VAKS, a French SAS with share capital of €5,000, 1 boucle des Mésanges, 57180 Terville, France — SIREN 844 650 416. Contact: contact@vaks-pm.com. Full details are in the legal notice.

2. An important distinction

Vaks-PM is self-hosted software: it runs on your organization's own infrastructure. The data you enter into it (projects, tasks, time, users) never passes through our servers and we have no access to it. For that data, your organization is the data controller; we are neither a processor nor a recipient.

This policy therefore covers only this marketing website and its trial portal.

3. Data collected and purposes

3.1 Trial licence request

When you request a trial, we process: your work email address, the technical identifier (UUID) of your instance, and your company name (optional).

• Issuing and sending your trial licence — legal basis: pre-contractual steps taken at your request (art. 6(1)(b) GDPR).
• Preventing the same applicant from obtaining multiple trials — legal basis: legitimate interest (art. 6(1)(f) GDPR) in preventing circumvention of the trial period.

No data is used for automated marketing, sold, or passed to third parties for commercial purposes.

3.2 Technical logs

Our host records incoming requests (IP address, date, page requested, browser) for security and reliability purposes — legal basis: legitimate interest.

3.3 Cookies and local storage

This website sets no cookies: no analytics, no advertising, no social networks. Your language and theme preferences are stored in your browser's local storage; they never leave your device and enable no tracking. Accordingly, no consent banner is required.

4. Processors and transfers

• Netlify, Inc. (United States) — website hosting and storage of the trial registry. Transfer outside the EU framed by the European Commission's standard contractual clauses.
• Brevo (France, European Union) — delivery of the confirmation email.

5. Retention periods

• Unconfirmed request: 24 hours, then deleted (the confirmation link expires).
• Registry of issued trials: 3 years from the end of the trial, in identifiable form.
• Beyond that, and upon an erasure request: see point 6 below.

6. Your rights — and what we keep after erasure

You have the rights of access, rectification, erasure, restriction, objection and portability. Write to contact@vaks-pm.com: we reply within one month.

Upon an erasure request, we anonymize your record: your email address and company name are erased, and the index that allowed us to find you by your address is deleted.

We do however keep, with no identifying data attached, the technical identifier (UUID) of the instance and the domain concerned, together with the issue date. These do not identify a natural person: they designate a software installation and an organization. Keeping them relies on our legitimate interest in not granting a second free trial to an organization that already used one — without them, erasure would become an easy way to reset the offer indefinitely.

You may lodge a complaint with the French data protection authority (CNIL) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

7. Security

The website is served over HTTPS only. Email addresses used as deduplication indexes are stored as SHA-256 digests, never in clear text as keys. The private key used to sign trial licences is never publicly exposed, and a licence signed with it is technically capped to a short duration.

8. Changes

This policy may change. Any substantial modification will be indicated on this page, with the date below updated.

Last updated: July 2026.